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CLAIMS 

A method comprising: 

providing an enterprise knowledge-base containing 
information representative of enterprise elements; 

providing a rules knowledge-base containing information 
representative of applicable rules; 

defining rule associations between the applicable rules and 
the enterprise elements; and 

assigning compliance scores to the rule associations, the 
compliance scores being indicative of an extent to which 
the enterprise elements comply with the applicable rules. 

The method of claim 1, further comprising graphically displaying the 
compliance scores. 

The method of claim 2, wherein displaying the compliance scores 
comprises displaying a cardinality of rule associations having a selected 
range of compliance scores. 

The method of claim 2, wherein displaying the compliance scores 
comprises displaying a histogram chart of a cardinality of rule associations 
having each of a plurality of ranges of compliance scores. 

The method of claim 1, further comprising displaying a tree view of the 
enterprise knowledge-base. 

The method of claim 5, wherein displaying the tree view comprises 
displaying a compliance indicator in association with an enterprise 
element, the compliance indicator being indicative of a compliance score 
associated with the enterprise element. 

The method of claim 1, further comprising associating remediation 
policies with the rule associations. 
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The method of claim 1, further comprising providing a graphical user 
interface for controlling the citation process and the evaluation process. 

A computer-readable medium having encoded thereon software having 
instructions that, when executed by a computer, cause the computer to: 

provide an enterprise knowledge-base containing 
information representative of enterprise elements; 

provide rules knowledge-base containing information 
representative of applicable rules; 

define rule associations between the applicable rules and the 
enterprise elements; and 

assign compliance scores to the rule associations, the 
compliance scores being indicative of an extent to which 
the enterprise elements comply with the applicable rules. 

The computer-readable medium of claim 9, wherein the software further 
comprises instructions for causing the computer to graphically display the 
compliance scores. 

The computer-readable medium of claim 10, wherein the instructions for 
causing the computer to display the compliance scores comprise 
instructions for causing the display of a cardinality of rule associations 
having a selected range of compliance scores. 

The computer-readable medium of claim 10, wherein the instructions for 
displaying the compliance scores comprise instructions for causing the 
display of a histogram chart of a cardinality of rule associations having 
each of a plurality of ranges of compliance scores. 

The computer-readable medium of claim 9, wherein the software further 
comprises instructions for causing the computer to display a tree view of 
the enterprise knowledge-base. 
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14. The computer-readable medium of claim 13, wherein the instructions for 
causing display of the tree view comprise instructions for causing the 
display of a compliance indicator in association with an enterprise 
element, the compliance indicator being indicative of a compliance score 
associated with the enterprise element. 

15. The computer-readable medium of claim 9, wherein the software further 
comprises instructions for causing the computer to associating remediation 
policies with the rule associations. 

16. The computer-readable medium of claim 9, wherein the software further 
comprises instructions for causing the computer to providing a graphical 
user interface for controlling the citation process and the evaluation 
process. 

17. A compliance-management system comprising: 

a data storage subsystem having encoded thereon 

an enterprise knowledge-base containing information 
representative of enterprise elements, and 

a rules knowledge-base containing information 
representative of applicable rules; and 

a processing subsystem in data communication with the data 
storage subsystem, the processing subsystem being configured 
to execute 

a citation process for defining rule associations between the 
applicable rules and the enterprise elements; and 

an evaluation process for assigning compliance scores to the 
rule associations, the compliance scores being indicative 
of an extent to which the enterprise elements comply with 
the applicable rules. 
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18. The system of claim 17, wherein the processing subsystem is configured 
to execute a compliance-display process for graphically displaying the 
compliance scores. 

19. The system of claim 18, wherein the compliance-display process is 
configured to display a cardinality of rule associations having a selected 
range of compliance scores. 

20. The system of claim 18, wherein the compliance-display process is 
configured to display a histogram chart of a cardinality of rule associations 
having each of a plurality of ranges of compliance scores. 

21. The system of claim 17, wherein the processing subsystem is configured 
to execute a tree-view process for providing a tree view of the enterprise 
knowledge-base. 

22. The system of claim 21, wherein the tree- view process is configured to 
display a compliance indicator in association with an enterprise element, 
the compliance indicator being indicative of a compliance score associated 
with the enterprise element. 

23. The system of claim 17, wherein the processing subsystem is configured 
to execute a remediation process for associating remediation policies with 
the rule associations. 

24. The system of claim 17, wherein the processing subsystem us configured 
to execute a switchboard process for providing a graphical user interface 
for controlling the citation process and the evaluation process. 
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